--- Privilege Escalation Audit ---
Whoami: 
USER INFORMATION
----------------

User Name                     SID                                          
============================= =============================================
windows18\iwpd_3544(appclien) S-1-5-21-1171191227-909778114-2002752854-1639


GROUP INFORMATION
-----------------

Group Name                                                Type             SID                                                             Attributes                                        
========================================================= ================ =============================================================== ==================================================
Everyone                                                  Well-known group S-1-1-0                                                         Mandatory group, Enabled by default, Enabled group
WINDOWS18\psacln                                          Alias            S-1-5-21-1171191227-909778114-2002752854-1005                   Mandatory group, Enabled by default, Enabled group
WINDOWS18\IWPG_appclien                                   Alias            S-1-5-21-1171191227-909778114-2002752854-1077                   Mandatory group, Enabled by default, Enabled group
BUILTIN\Users                                             Alias            S-1-5-32-545                                                    Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\BATCH                                        Well-known group S-1-5-3                                                         Mandatory group, Enabled by default, Enabled group
CONSOLE LOGON                                             Well-known group S-1-2-1                                                         Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\Authenticated Users                          Well-known group S-1-5-11                                                        Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\This Organization                            Well-known group S-1-5-15                                                        Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\Local account                                Well-known group S-1-5-113                                                       Mandatory group, Enabled by default, Enabled group
BUILTIN\IIS_IUSRS                                         Alias            S-1-5-32-568                                                    Mandatory group, Enabled by default, Enabled group
LOCAL                                                     Well-known group S-1-2-0                                                         Mandatory group, Enabled by default, Enabled group
IIS APPPOOL\fruits-vegitables.nmvm.org(domain)(4.0)(pool) Well-known group S-1-5-82-3433730651-3069651074-1222273198-1050829645-3877991710 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\NTLM Authentication                          Well-known group S-1-5-64-10                                                     Mandatory group, Enabled by default, Enabled group
Mandatory Label\Medium Mandatory Level                    Label            S-1-16-8192                                                                                                       


PRIVILEGES INFORMATION
----------------------

Privilege Name                Description                        State   
============================= ================================== ========
SeIncreaseQuotaPrivilege      Adjust memory quotas for a process Disabled
SeChangeNotifyPrivilege       Bypass traverse checking           Enabled 
SeIncreaseWorkingSetPrivilege Increase a process working set     Disabled


Ver: 
Microsoft Windows [Version 10.0.17763.7919]

Arch: AMD64 

Tasklist: 
Image Name                     PID Services                                    
========================= ======== ============================================
System Idle Process              0 N/A                                         
System                           4 N/A                                         
Registry                       200 N/A                                         
smss.exe                       748 N/A                                         
csrss.exe                      872 N/A                                         
wininit.exe                    948 N/A                                         
services.exe                   712 N/A                                         
lsass.exe                      792 N/A                                         
svchost.exe                   1060 N/A                                         
svchost.exe                   1092 N/A                                         
fontdrvhost.exe               1140 N/A                                         
svchost.exe                   1204 N/A                                         
svchost.exe                   1244 N/A                                         
svchost.exe                   1356 N/A                                         
svchost.exe                   1420 N/A                                         
svchost.exe                   1432 N/A                                         
svchost.exe                   1452 N/A                                         
svchost.exe                   1552 N/A                                         
svchost.exe                   1628 N/A                                         
svchost.exe                   1636 N/A                                         
svchost.exe                   1648 N/A                                         
svchost.exe                   1656 N/A                                         
svchost.exe                   1684 N/A                                         
svchost.exe                   1780 N/A                                         
svchost.exe                   1888 N/A                                         
svchost.exe                   1976 N/A                                         
svchost.exe                   2012 N/A                                         
VSSVC.exe                     1196 N/A                                         
svchost.exe                   2056 N/A                                         
svchost.exe                   2064 N/A                                         
svchost.exe                   2072 N/A                                         
svchost.exe                   2216 N/A                                         
svchost.exe                   2232 N/A                                         
svchost.exe                   2288 N/A                                         
svchost.exe                   2452 N/A                                         
svchost.exe                   2468 N/A                                         
svchost.exe                   2476 N/A                                         
svchost.exe                   2524 N/A                                         
svchost.exe                   2680 N/A                                         
svchost.exe                   2824 N/A                                         
svchost.exe                   2916 N/A                                         
svchost.exe                   2924 N/A                                         
svchost.exe                   2948 N/A                                         
svchost.exe                   2156 N/A                                         
svchost.exe                   3152 N/A                                         
svchost.exe                   3204 N/A                                         
svchost.exe                   3452 N/A                                         
svchost.exe                   3460 N/A                                         
spoolsv.exe                   3536 N/A                                         
svchost.exe                   3708 N/A                                         
svchost.exe                   3736 N/A                                         
svchost.exe                   3744 N/A                                         
svchost.exe                   3760 N/A                                         
svchost.exe                   3768 N/A                                         
svchost.exe                   3776 N/A                                         
MEPOPS.exe                    3788 N/A                                         
MESMTPC.exe                   3796 N/A                                         
MEPOC.exe                     3804 N/A                                         
MEMTA.exe                     3820 N/A                                         
svchost.exe                   3836 N/A                                         
MEIMAPS.EXE                   3844 N/A                                         
MEDMS.EXE                     3856 N/A                                         
MELSC.exe                     3864 N/A                                         
svchost.exe                   3884 N/A                                         
MsDepSvc.exe                  3896 N/A                                         
svchost.exe                   3916 N/A                                         
PopPassD.exe                  3936 N/A                                         
SMSvcHost.exe                 3944 N/A                                         
svchost.exe                   3964 N/A                                         
svchost.exe                   3952 N/A                                         
svchost.exe                   4004 N/A                                         
sqlwriter.exe                 4016 N/A                                         
svchost.exe                   4024 N/A                                         
svchost.exe                   4088 N/A                                         
WMSvc.exe                     3784 N/A                                         
sqlbrowser.exe                4168 N/A                                         
svchost.exe                   4304 N/A                                         
svchost.exe                   4568 N/A                                         
svchost.exe                   5108 N/A                                         
sqlceip.exe                   5188 N/A                                         
mysqld.exe                    5228 N/A                                         
dllhost.exe                   6624 N/A                                         
SMSvcHost.exe                 7624 N/A                                         
fdlauncher.exe                7412 N/A                                         
SecurityHealthService.exe     2512 N/A                                         
svchost.exe                   1272 N/A                                         
svchost.exe                  13092 N/A                                         
svchost.exe                  12680 N/A                                         
svchost.exe                  13452 N/A                                         
svchost.exe                  10204 N/A                                         
svchost.exe                  13744 N/A                                         
msdtc.exe                    13536 N/A                                         
nssm.exe                     14264 N/A                                         
php.exe                      13432 N/A                                         
conhost.exe                  13396 N/A                                         
svchost.exe                  12736 N/A                                         
svchost.exe                   3012 N/A                                         
svchost.exe                  15800 N/A                                         
svchost.exe                  11456 N/A                                         
svchost.exe                  32396 N/A                                         
svchost.exe                  32676 N/A                                         
svchost.exe                  34264 N/A                                         
w3wp.exe                     16288 N/A                                         
svchost.exe                   8800 N/A                                         
perl.exe                     17564 N/A                                         
csrss.exe                    76900 N/A                                         
winlogon.exe                 33488 N/A                                         
fontdrvhost.exe              64848 N/A                                         
dwm.exe                      24628 N/A                                         
rdpclip.exe                  60856 N/A                                         
sihost.exe                   37168 N/A                                         
svchost.exe                   7616 N/A                                         
svchost.exe                  73296 N/A                                         
taskhostw.exe                16220 N/A                                         
explorer.exe                  9132 N/A                                         
ShellExperienceHost.exe      19668 N/A                                         
RuntimeBroker.exe            17560 N/A                                         
RuntimeBroker.exe            68824 N/A                                         
ctfmon.exe                   18776 N/A                                         
smartscreen.exe              28692 N/A                                         
traymonitor.exe              54120 N/A                                         
METray.exe                    6288 N/A                                         
perl.exe                     33540 N/A                                         
perl.exe                     29656 N/A                                         
perl.exe                     56888 N/A                                         
perl.exe                     54672 N/A                                         
perl.exe                     60952 N/A                                         
perl.exe                     76888 N/A                                         
svchost.exe                  26332 N/A                                         
perl.exe                     63676 N/A                                         
svchost.exe                  14164 N/A                                         
ncpa.exe                     71596 N/A                                         
ncpa.exe                     52192 N/A                                         
conhost.exe                  69592 N/A                                         
ncpa.exe                     56884 N/A                                         
conhost.exe                  22332 N/A                                         
perl.exe                     33528 N/A                                         
csrss.exe                    38532 N/A                                         
winlogon.exe                 61132 N/A                                         
fontdrvhost.exe              10244 N/A                                         
dwm.exe                      18300 N/A                                         
rdpclip.exe                   7604 N/A                                         
sihost.exe                    4812 N/A                                         
svchost.exe                  53912 N/A                                         
svchost.exe                  17916 N/A                                         
taskhostw.exe                13684 N/A                                         
explorer.exe                 45088 N/A                                         
ShellExperienceHost.exe      19524 N/A                                         
SearchUI.exe                 35968 N/A                                         
RuntimeBroker.exe            16368 N/A                                         
RuntimeBroker.exe            16436 N/A                                         
ctfmon.exe                   62220 N/A                                         
RuntimeBroker.exe            22428 N/A                                         
smartscreen.exe               9784 N/A                                         
METray.exe                    2448 N/A                                         
dllhost.exe                    864 N/A                                         
InetMgr.exe                  35736 N/A                                         
perl.exe                     62152 N/A                                         
iashost.exe                  78684 N/A                                         
ApplicationFrameHost.exe     10824 N/A                                         
svchost.exe                  31840 N/A                                         
dllhost.exe                  13936 N/A                                         
svchost.exe                  63720 N/A                                         
WindowsInternal.Composabl    21596 N/A                                         
csrss.exe                     4704 N/A                                         
winlogon.exe                 48600 N/A                                         
fontdrvhost.exe              22788 N/A                                         
dwm.exe                      22588 N/A                                         
csrss.exe                     9000 N/A                                         
winlogon.exe                 72752 N/A                                         
ctfmon.exe                   10032 N/A                                         
fontdrvhost.exe              13816 N/A                                         
LogonUI.exe                   6240 N/A                                         
dwm.exe                      33052 N/A                                         
rdpclip.exe                  73232 N/A                                         
sihost.exe                   11892 N/A                                         
svchost.exe                  55292 N/A                                         
svchost.exe                  63872 N/A                                         
taskhostw.exe                18544 N/A                                         
explorer.exe                 28720 N/A                                         
ShellExperienceHost.exe      55176 N/A                                         
ServerManager.exe            27308 N/A                                         
SearchUI.exe                 59860 N/A                                         
RuntimeBroker.exe            72424 N/A                                         
RuntimeBroker.exe            36436 N/A                                         
RuntimeBroker.exe            15700 N/A                                         
smartscreen.exe              16540 N/A                                         
METray.exe                   26948 N/A                                         
traymonitor.exe              18688 N/A                                         
svchost.exe                   5244 N/A                                         
dllhost.exe                  42556 N/A                                         
dns.exe                      29108 N/A                                         
LogonUI.exe                  32824 N/A                                         
MusNotifyIcon.exe            78268 N/A                                         
perl.exe                     20612 N/A                                         
win32calc.exe                29232 N/A                                         
SearchUI.exe                 27004 N/A                                         
iexplore.exe                 41740 N/A                                         
iexplore.exe                 31028 N/A                                         
iexplore.exe                  7516 N/A                                         
mmc.exe                      33472 N/A                                         
nssm.exe                     62280 N/A                                         
task-manager.exe             43224 N/A                                         
conhost.exe                  69928 N/A                                         
plesksrv.exe                 32008 N/A                                         
dllhost.exe                  69364 N/A                                         
win32calc.exe                10064 N/A                                         
mmc.exe                      42732 N/A                                         
perl.exe                     27708 N/A                                         
perl.exe                     27248 N/A                                         
perl.exe                     15244 N/A                                         
taskhostw.exe                10572 N/A                                         
LogonUI.exe                  47816 N/A                                         
MpDefenderCoreService.exe    71720 N/A                                         
MsMpEng.exe                  63392 N/A                                         
NisSrv.exe                   58520 N/A                                         
perl.exe                     51788 N/A                                         
perl.exe                     22308 N/A                                         
perl.exe                     56488 N/A                                         
perl.exe                     12936 N/A                                         
perl.exe                      1764 N/A                                         
perl.exe                     29372 N/A                                         
conhost.exe                  13732 N/A                                         
w3wp.exe                     22972 N/A                                         
w3wp.exe                     30732 N/A                                         
sqlservr.exe                 47336 N/A                                         
taskhostw.exe                37624 N/A                                         
w3wp.exe                     64344 N/A                                         
w3wp.exe                     12004 N/A                                         
w3wp.exe                     10396 N/A                                         
fdhost.exe                   30372 N/A                                         
conhost.exe                  11148 N/A                                         
w3wp.exe                     76080 N/A                                         
w3wp.exe                     30128 N/A                                         
w3wp.exe                     42936 N/A                                         
MpCmdRun.exe                 27328 N/A                                         
fdhost.exe                   65016 N/A                                         
conhost.exe                  41500 N/A                                         
w3wp.exe                     11360 N/A                                         
w3wp.exe                     60556 N/A                                         
mysqld.exe                   75912 N/A                                         
w3wp.exe                      7976 N/A                                         
w3wp.exe                     37336 N/A                                         
w3wp.exe                     53684 N/A                                         
svchost.exe                  66408 N/A                                         
w3wp.exe                     36776 N/A                                         
w3wp.exe                     15432 N/A                                         
w3wp.exe                     49344 N/A                                         
w3wp.exe                     67064 N/A                                         
w3wp.exe                     36520 N/A                                         
w3wp.exe                     20928 N/A                                         
WmiPrvSE.exe                 37944 N/A                                         
WmiPrvSE.exe                 37240 N/A                                         
w3wp.exe                     63768 N/A                                         
w3wp.exe                     29972 N/A                                         
w3wp.exe                     64588 N/A                                         
w3wp.exe                     21256 N/A                                         
w3wp.exe                     41848 N/A                                         
w3wp.exe                     54156 N/A                                         
w3wp.exe                     58760 N/A                                         
w3wp.exe                     41624 N/A                                         
w3wp.exe                     48388 N/A                                         
w3wp.exe                     61236 N/A                                         
w3wp.exe                     52112 N/A                                         
w3wp.exe                     15784 N/A                                         
w3wp.exe                     38488 N/A                                         
php-cgi.exe                  25324 N/A                                         
php-cgi.exe                  39212 N/A                                         
w3wp.exe                     46712 N/A                                         
w3wp.exe                     73648 N/A                                         
w3wp.exe                     11860 N/A                                         
w3wp.exe                     18220 N/A                                         
php-cgi.exe                  74564 N/A                                         
php-cgi.exe                  29004 N/A                                         
w3wp.exe                     51240 N/A                                         
w3wp.exe                     58432 N/A                                         
php-cgi.exe                  55152 N/A                                         
w3wp.exe                     19792 N/A                                         
php-cgi.exe                  40936 N/A                                         
php-cgi.exe                  44908 N/A                                         
w3wp.exe                     47184 N/A                                         
php-cgi.exe                  34580 N/A                                         
php-cgi.exe                  25704 N/A                                         
php-cgi.exe                  68172 N/A                                         
php-cgi.exe                  76268 N/A                                         
php-cgi.exe                  71472 N/A                                         
w3wp.exe                     73176 N/A                                         
w3wp.exe                     32028 N/A                                         
w3wp.exe                     22452 N/A                                         
w3wp.exe                     78508 N/A                                         
php-cgi.exe                  47308 N/A                                         
w3wp.exe                     34180 N/A                                         
php-cgi.exe                  33840 N/A                                         
w3wp.exe                     51944 N/A                                         
php-cgi.exe                  65620 N/A                                         
php-cgi.exe                  17164 N/A                                         
w3wp.exe                     42996 N/A                                         
php-cgi.exe                  11344 N/A                                         
w3wp.exe                     69896 N/A                                         
w3wp.exe                     70920 N/A                                         
w3wp.exe                     56368 N/A                                         
w3wp.exe                     31364 N/A                                         
w3wp.exe                      7824 N/A                                         
w3wp.exe                     47424 N/A                                         
w3wp.exe                     50760 N/A                                         
w3wp.exe                     16236 N/A                                         
w3wp.exe                     12260 N/A                                         
w3wp.exe                     16932 N/A                                         
w3wp.exe                     74628 N/A                                         
w3wp.exe                     52680 N/A                                         
php-cgi.exe                   3336 N/A                                         
php-cgi.exe                  27836 N/A                                         
w3wp.exe                     61136 N/A                                         
w3wp.exe                     69712 N/A                                         
w3wp.exe                     40588 N/A                                         
w3wp.exe                     25048 N/A                                         
w3wp.exe                     18656 N/A                                         
w3wp.exe                     34568 N/A                                         
php-cgi.exe                  13164 N/A                                         
w3wp.exe                     77032 N/A                                         
w3wp.exe                     73056 N/A                                         
w3wp.exe                     44620 N/A                                         
php-cgi.exe                  72452 N/A                                         
w3wp.exe                      9160 N/A                                         
w3wp.exe                     40388 N/A                                         
php-cgi.exe                  75708 N/A                                         
php-cgi.exe                  73696 N/A                                         
php-cgi.exe                  75632 N/A                                         
php-cgi.exe                  48040 N/A                                         
php-cgi.exe                  20464 N/A                                         
php-cgi.exe                  64476 N/A                                         
php-cgi.exe                  50800 N/A                                         
php-cgi.exe                   1504 N/A                                         
php-cgi.exe                  32688 N/A                                         
php-cgi.exe                  76632 N/A                                         
w3wp.exe                     11404 N/A                                         
w3wp.exe                      8416 N/A                                         
w3wp.exe                     50912 N/A                                         
php-cgi.exe                  72540 N/A                                         
php-cgi.exe                  44364 N/A                                         
w3wp.exe                     21984 N/A                                         
w3wp.exe                      7680 N/A                                         
w3wp.exe                     65892 N/A                                         
w3wp.exe                      7492 N/A                                         
w3wp.exe                     47596 N/A                                         
w3wp.exe                     38408 N/A                                         
w3wp.exe                     27112 N/A                                         
w3wp.exe                     76300 N/A                                         
w3wp.exe                     15452 N/A                                         
w3wp.exe                     15468 N/A                                         
w3wp.exe                     45828 N/A                                         
w3wp.exe                     56124 N/A                                         
w3wp.exe                      5088 N/A                                         
w3wp.exe                     64976 N/A                                         
w3wp.exe                     12084 N/A                                         
w3wp.exe                     10436 N/A                                         
php-cgi.exe                  29796 N/A                                         
cmd.exe                      76808 N/A                                         
conhost.exe                  46832 N/A                                         
tasklist.exe                 47412 N/A